VMware ESXi, vCenter, Workstation and Fusion: several critical flaws
Attackers could crash these virtualization products, read data they should not see, get around security checks, or run their own code. Anyone running VMware virtual machines or management servers should update quickly.
| Severity | CriticalVulnerability |
|---|---|
| Being exploited? | UnclearNo reports either way yet |
| Fix available? | UnclearNo fixed version published in the sources yet |
| How sure is this? | Official sourceBacked by an official source |
What happened
Multiple vulnerabilities in VMware ESXi, VMware vCenter Server, VMware Workstation and VMware Fusion allow denial of service, information disclosure, security bypass and code execution.
Are you affected?
You are affected if you run VMware ESXi, VMware vCenter Server, VMware Workstation or VMware Fusion in an unpatched version.
VMware ESXi, VMware vCenter Server, VMware Workstation, VMware Fusion (exact versions unknown from source)
What to do
- Check the VMware security advisories for your ESXi, vCenter, Workstation and Fusion versions
- Apply the vendor patches to all affected VMware products as soon as possible
- Restrict access to vCenter and ESXi management interfaces to trusted networks until patched
Timeline
- 29 Oct 2026, 09:49 UTCPublicly disclosed
- 29 Oct 2026, 09:49 UTCReported by CERT-Bund (BSI) · CERT-Bund (BSI)
- 29 Oct 2026, 09:57 UTCPicked up by Zero Radar
Sources 1 report, oldest first
Official vendor, government CERT or advisory database
- [UPDATE] [kritisch] VMware Produkte: Mehrere SchwachstellenCERT-Bund (BSI) · 29 Oct 2026, 09:49 UTC
Technical details
- ID
- ZR-c534da93
- Disclosed
- 29 Oct 2026, 09:49 UTC
- On Zero Radar
- 29 Oct 2026, 09:57 UTC (8 min after disclosure)
- Last change
- 29 Oct 2026, 09:57 UTC
The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works